1. Introduction
YorTech (“we,” “us,” or “our”) operates the YorTech ERP platform and this website (yortech.id). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or use our services.
By accessing or using YorTech, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.
2. Information We Collect
We collect information that you provide directly to us, as well as information we collect automatically when you use our services:
- Account Data: name, email address, company name, job title, and password when you register.
- Billing Data: payment method details processed by Midtrans (our payment gateway); we do not store full card numbers.
- Usage Data: pages visited, features used, timestamps, IP address, browser type, and device information.
- Communications: messages you send via our contact form or support channels.
- Employee Data (ERP): HR, payroll, and operational records that your organization enters into the ERP system — owned by your organization.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the YorTech platform.
- Process subscriptions and billing through Midtrans.
- Send transactional communications such as invoices, alerts, and security notices.
- Respond to inquiries and provide customer support.
- Improve, personalize, and expand our services.
- Comply with legal obligations under Indonesian law (UU PDP) and applicable regulations.
We will never sell your personal data to third parties.
4. Data Sharing & Third Parties
We may share your information with trusted third parties only as necessary to operate our services:
- Midtrans — payment processing. Subject to Midtrans Privacy Policy.
- Cloud Infrastructure Provider — hosting and data storage in Indonesia.
- Email Service Provider — transactional email delivery.
- Legal & regulatory authorities — when required by Indonesian law or court order.
All third-party processors are bound by contractual data protection obligations consistent with applicable law.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Upon account termination we will delete or anonymize your data within 90 days, except where longer retention is required by Indonesian law or legitimate business purposes (e.g., tax and financial records for 5 years).
6. Cookies
We use cookies and similar tracking technologies to operate and improve our services. See our Cookie Policy for full details on what cookies we use and how to manage them.
7. Your Rights
Under Indonesian Personal Data Protection Law (UU PDP No. 27/2022) and applicable regulations, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data (subject to legal retention requirements).
- Restrict processing of your data in certain circumstances.
- Data portability — receive your data in a machine-readable format.
- Object to processing for direct marketing purposes.
To exercise any of these rights, contact us at privacy@yortech.id. We will respond within 30 days.
8. Security
We implement industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. For significant changes we may also send an email notification to registered users.
10. Contact Us
If you have questions or concerns about this Privacy Policy, please contact our Data Protection Officer:
YorTech
privacy@yortech.id
Jakarta, Indonesia